NEW SHEET 



GENERATE AT LEAST TWO CERTIFICATE 
REVOCATION LISTS (CRL) OF A FIRST 
TYPE WITH AT LEAST PARTIALLY 
CONSECUTIVE VALIDITY PERIODS WHERE 
THE BEGINNING OF THE VALIDITY PERIOD 
OF AT LEAST ONE OF SAID CRLs IS AT A 
FUTURE POINT IN TIME, EACH CRL NOT 
INDICATING A REVOKED STATUS OF ANY 
CERTIFICATE AUTHORITY (CA) 
CONTAINED THEREIN 



GENERATE AT LEAST TWO 
CERTIFICATE REVOCATION LISTS OF A 
SECOND TYPE (CRL) WITH AT LEAST 
PARTIALLY CONSECUTIVE VALIDITY 
PERIODS WHERE THE BEGINNING OF 
THE VALIDITY PERIOD OF AT LEAST 
ONE OF SAID CRLs IS AT A FUTURE 
POINT IN TIME, EACH CRL INDICATING 
A REVOKED STATUS OF AT LEAST ONE 
CERTIFICATE AUTHORITY (CA) 
CONTAINED THEREIN 




IF THE SECURITY OF EACH 
CA ON A CRL OF A FIRST 
TYPE IS STILL NOT 
BREACHED BY THE TIME OF 

THE BEGINNING OF THE 
VALIDITY PERIOD OF THAT 
CRL , PUBLISHING THAT CRL 
OF A FIRST TYPE 
ESSENTIALLY AT THE 
BEGINNING OF THE VALIDITY 
PERIOD OF SAID CRL, BUT IF 
THE SECURITY OF AT LEAST 
ONE CA IN A CRL OF THE 

FIRST TYPE HAS BEEN 
BREACHED, PUBLISHING A 
CRL OF THE SECOND TYPE 

ESSENTIALLY AT THE 
BEGINNING OF THE VALIDITY 
PERIOD OF SAID CRL 



CHECKING REGARDING EACH 
CA LISTED IN THE CRLs OF 

SAID FIRST TYPE IF THE 
SECURITY OF ANY CA HAS 
BEEN BREACHED 
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GENERATE AT LEAST TWO CERTIFICATE 
REVOCATION LISTS (CRL) OF A FIRST 
TYPE WITH AT LEAST PARTIALLY 
CONSECUTIVE VALIDITY PERIODS WHERE 
THE BEGINNING OF THE VALIDITY PERIOD 
OF AT LEAST ONE OF SAID CRLs IS AT A 
FUTURE POINT IN TIME, EACH CRL NOT 
INDICATING A REVOKED STATUS OF ANY 
CERTIFICATE AUTHORITY (CA) 
CONTAINED THEREIN 



GENERATE AT LEAST TWO 
CERTIFICATE REVOCATION LISTS 
(CRL) OF A SECOND TYPE WITH AT 
LEAST PARTIALLY CONSECUTIVE 
VALIDITY PERIODS WHERE THE 
BEGINNING OF THE VALIDITY PERIOD 
OF AT LEAST ONE OF SAID CRLs OF 
SAID SECOND TYPE IS AT A FUTURE 
POINT IN TIME, EACH CRL INDICATING 
A REVOKED STATUS OF AT LEAST ONE 
CERTIFICATE AUTHORITY (CA) 
CONTAINED THEREIN 



GENERATING AT LEAST TWO 
CERTIFICATE REVOCATION LISTS (CRL) 
OF A THIRD TYPE HAVING AT LEAST 
PARTIALLY CONSECUTIVE VALIDITY 
PERIODS WHERE THE BEGINNING OF THE 
VALIDITY PERIOD OF AT LEAST ONE OF 
THE CRLs IS A FUTURE POINT IN TIME 



CHECKING REGARDING EACH 
CA LISTED IN THE CRLs OF 

SAID FIRST TYPE IF THE 
SECURITY OF ANY CA HAS 
BEEN BREACHED AND 
DECIDING WHETHER TO 
REVOKE THE CA OR PLACE 
THE CA ON TEMPORARY 
SUSPENSION 



IF THE SECURITY OF EACH CA ON A 
CRL OF A FIRST TYPE IS STILL NOT 
BREACHED BY THE TIME OF THE 
BEGINNING OF THE VALIDITY PERIOD 

OF THAT CRL , PUBLISHING THAT 
CRL OF A FIRST TYPE ESSENTIALLY 
AT THE BEGINNING OF THE VALIDITY 

PERIOD OF SAID CRL, BUT IF THE 
SECURITY OF AT LEAST ONE CA IN A 
CRL OF THE FIRST TYPE HAS BEEN 
BREACHED AND IT IS DECIDED TO 
REVOKE THE CA, PUBLISHING A CRL 
OF THE SECOND TYPE , AND IF A CA 

HAS BEEN TEMPORARILY 
SUSPENDED , PUBLISHING SAID CRL 
OF SAID THIRD TYPE 
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COMPUTER PROGRAM CODE 
MEANS FOR GENERATING 
CERTIFICATE REVOCATION 
LISTS (CRL) OF A FIRST TYPE 
HAVING AT LEAST PARTIALLY 

CONSECUTIVE VALIDITY 
PERIODS WITH THE BEGINNING 
. OF THE VALIDITY PERIOD OF AT 
LEAST ONE CRL BEING A 
FUTURE POINT IN TIME, THE 
CRL's OF THE FIRST TYPE 
INDICATING NO REVOCATION 
FOR A PREDEFINED GROUP OF 
CERTICATE AUTHORITIES 
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COMPUTER PROGRAM CODE 
MEANS FOR GENERATING 
CERTIFICATE REVOCATION LISTS 
(CRL) OF A SECOND TYPE HAVING 

AT LEAST PARTIALLY 
CONSECUTIVE VALIDITY PERIODS 
WITH THE BEGINNING OF THE 
VALIDITY PERIOD OF AT LEAST 
ONE CRL BEING A FUTURE POINT 
IN TIME, THE CRL's OF THE 
SECOND TYPE INDICATING 
REVOKED STATUS FOR AT LEAST 
ONE CERTIFICATE AUTHORITY (CA) 
IN A PREDEFINED GROUP OF CA's 
IN EACH CRL 



COMPUTER PROGRAM CODE MEANS 

FOR CHECKING REGARDING EACH 
CA IN A PREDEFINED GROUP OF CA's 
TO DETERMINE IF THE SECURITY 
HAS BEEN BREACHED AND FOR 
PUBLISHING A CRL OF A FIRST TYPE 
IF SECURITY OF NONE OF SAID CA's 
HAS BEEN BREACHED, PUBLISHING 
EACH ESSENTIALLY AT THE TIME OF 
THE BEGINNING OF THE VALIDITY 
PERIOD OF THAT PARTICULAR CRL, 

AND PUBLISHING A CRL OF A 
SECOND TYPE IF SECURITY OF AT 
LEAST ONE OF SAID CA's HAS BEEN 
BREACHED 
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